2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8313 | MEDIUM | 5.9 | 1.7% | Dec 20, 2019 | GnuTLS incorrectly validates the first byte of padding in CBC modes |
| CVE-2015-7892 | HIGH | 7.8 | 1.4% | Dec 9, 2019 | Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in... |
| CVE-2015-3425 | MEDIUM | 6.1 | 0.9% | Dec 9, 2019 | Cross-site scripting (XSS) vulnerability in Accentis Content Resource Management System before October 2015 patch allows... |
| CVE-2015-3424 | HIGH | 8.8 | 1.6% | Dec 9, 2019 | SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote a... |
| CVE-2015-1853 | MEDIUM | 6.5 | 1.7% | Dec 9, 2019 | chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows... |
| CVE-2015-0841 | HIGH | 7.5 | 2.2% | Dec 9, 2019 | Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attac... |
| CVE-2015-7542 | MEDIUM | 5.3 | 0.4% | Dec 3, 2019 | A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates. |
| CVE-2015-0837 | MEDIUM | 5.9 | 2.0% | Nov 29, 2019 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information... |
| CVE-2015-3406 | HIGH | 7.5 | 2.3% | Nov 29, 2019 | The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SI... |
| CVE-2015-2060 | MEDIUM | 5.3 | 2.3% | Nov 29, 2019 | cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers t... |
| CVE-2015-1855 | MEDIUM | 5.9 | 2.8% | Nov 29, 2019 | verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x ... |
| CVE-2015-5155 | — | — | — | Nov 26, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3609. Reason: This candidate is a reservation du... |
| CVE-2015-9539 | MEDIUM | 6.1 | 1.6% | Nov 26, 2019 | The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS. |
| CVE-2015-9538 | MEDIUM | 6.5 | 10.1% | Nov 26, 2019 | The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection. |
| CVE-2015-9537 | MEDIUM | 5.4 | 1.2% | Nov 26, 2019 | The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_heig... |
| CVE-2015-4457 | MEDIUM | 5.4 | 0.6% | Nov 26, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated u... |
| CVE-2015-7831 | HIGH | 8.8 | 1.1% | Nov 26, 2019 | In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used. |
| CVE-2015-6495 | HIGH | 7.5 | 1.1% | Nov 26, 2019 | There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles. |
| CVE-2015-1396 | HIGH | 7.5 | 3.2% | Nov 25, 2019 | A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files... |
| CVE-2015-7810 | MEDIUM | 4.7 | 0.4% | Nov 22, 2019 | libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files |
| CVE-2015-5694 | MEDIUM | 6.5 | 1.6% | Nov 22, 2019 | Designate does not enforce the DNS protocol limit concerning record set sizes |
| CVE-2015-1780 | MEDIUM | 6.5 | 1.0% | Nov 22, 2019 | oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center |
| CVE-2015-3140 | HIGH | 8.8 | 1.3% | Nov 21, 2019 | Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy... |
| CVE-2015-2793 | MEDIUM | 6.1 | 1.7% | Nov 21, 2019 | Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote at... |
| CVE-2015-3167 | HIGH | 7.5 | 4.0% | Nov 20, 2019 | contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x be... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now